Threats tagged 'ghsa-c5xr-v8f7-vfvw'

The Mozart FM Transmitter web management interface version WEBMOZZI-00287 has an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files, such as PHP webshells, to the /patch/ directory. This vulnerability allows execution of arbitrary commands on the server, potentially leading to full system compromise.